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AppI, No-: 09/523,446 

Amdt. dated June 4, 2004 

Reply to Office action of April 6, 2004 

Amendments to the Claims; 

This listing of daims will replace ail prior versions, and listings, of claims in 
the application: 

Listing of Claims: 

1 . (Canceled). 

2. (Currently amended) A mnthod as in d aim-gy A method fo r detecting 
telecommunication fraud performed in a data orocessinQ system having a data 
warehouse and an OLAP sender, the methcwj comprising: 

retrieving a plurality of call recor<js from the data warehouse: 

generating a calling profile cube based on the call records: wh erein the 

calling profile cube includes information on multiple customers: 
generating a volume^based calling pattern cube for each individual 

customer based on the multi-customer calling profile cut>e: 
comparing the volume-based calling pattern cube for each customer to a 

predetemnined fraudulent volume-based calling pattern: and 
when the volume-based calling pattem cube is in a first predetermined 
relationship with predetermined fraudulent volume-based calling 
pattem, performing a first action, 
wherein said data warehouse has a call table and a profile table[[J] and 
wherein the step of generating a catling profile cube based on the records further 
comprises the steps of: 

retrieving records from the call table and based thereon generating a 
snapshot cube representing the records ft^m the call table, said snapshot cube 
having predetermined dimensions; 

retrieving records from the profile table and based thereon generating a 
profile cube representing the records from the profile table, said profile cube 
having predetenmined dimensions that are the same as the dimensions of the 

snapshot oube; 
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Reply to Office action of April 6, 2004 

merging the snapshot cube and the profile cube to generate an updated 
profile cube; and 

deriving the volume-t>ased calling pattern cubes based on the updated 
profile cube. 

3. (Cun-ently amended) A m e thod a s i n c l a i m 27 A method for detecting 
telecommunication ft-aud performed in a data processing system having a data 
warehouse and an QLAP server, the method comprising: 

retrieving a plurality of call records from the data warehouse: 

generating a calling profile cube based on the call records: wherein the 
calling profile cube includes information on multiple customers: 

generating a volume-based calling pattern cube for each Individual 
customer based on the multi-customer calling profile cube: 

comparing the volume-based calling pattern cube for each customer to a 
predetermined fraudulent volume-based calling pattern: and 

when the volume-based calling pattern cube is in a first predetermined 
relationship with predetermined fraudulent volume-based calling pattern^ 
performing a first action. 

wherein th e s t e p of wh e n th e vo l um e b ase d c al ling patt e rn oubo i n a first 
pr e d e t e rmin e d r el ation s h i p w i th pr o dotorminod fraudulent volumo based ca ll ing 
pattern, performing a first action includes one of: 

flagging a particular caller with the volume-based calling pattern being 
analyzed as suspicious; 

automatically generating an alert that specifies callers with suspicious 
volume-based calling pattern; 

performing further investigation on callers with suspicious volume-based 
calling pattern; 

cancellation of telephone services for callers with suspicious volume- 
based calling pattern; and 

performing other appropriate remedial actions. 
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4.-6. (Canceled). 

7, (Previously presented) A method as in claim 2 furtiier comprising; 

storing the updated profile cube into the profile table in the data 
warehouse; and 

performing data staging between the profile table and the updated profile 
cube at predetermined time intervals. 

8 (Previously presented) A method as in claim 2 wherein said profile cube, 
snapshot cube, and updated pn^fiile cube each includes at least two dimensions 
and at least two levels. 

9. (Previously presented) A.method as in clainr) 8 further comprising: 
analyzing the calling pattem cube by utilizing at least one OLAP operation 

along more than one level. 

10. (Previously presented) A method as in claim 8 further comprising: 
analyzing the calling pattem cube by utilizing at least one OLAP operation 

along more than one dimension. 

11 (Previously presented) A method as in claim 2 wherein the profile cube, 
snapshot cube, and the updated profile cube each are multi-level and multi- 
dimensional cubes^ 

12. (Previously presented) A method as in claim 2 wherein the profile table 
and the call table each has a plurality of attributes, and the profile cube and 
snapshot cube each has a plurality of dimensions, said attributes con-esponding 
in a one-to-one fashion to the dimensions. 

13. (Previously presented) A method as in claim 2 wherein the profile cube 
includes Ida&t one cell having probability based values. 
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14. (Canceled). 

15. (Currently amended) A-data- proc e s s ing s y s t e m a o i n olaim 1'1 furth e r 
oompr is inG r A data processing system comprising: 

a data warehouse for storing data in a relational format , said data 
warehouse including a Profile table and a call table: 

an OLAP server, coupled to the data warehouse, for providing 
predetermined CLAP operations: 

a profile engine, coupled to the data warehouse for computing, maintaining 
and utilizing caller pattern cubes that represent caller p rofiles: wherein the caller 
pattem cubes can be utilized to detect telecommunication fraud; and 

a fraud detection module for detecting telecommunication fraud by 
comparing known fraudulent profiles to caller pattem cubes; 

the profile engine further generating a profile cube from information 
selected from the profile table, generating a snapshot cube, updating the profile 
cube by merging the profile cube and the snapshot cube to generate an updated 
profile cube, and deriving a calling pattem cube based on the updated profile 
cube; wherein the profile engine is a scalable computation engine that is 
implemented by OLAP programming supported by the OLAP sen/er. 

16. -28. (Canceled). 

29, (Cun^ently amended) a m n thnH i n cAntm 1^ A method for detecting 

telecommunication fraud performed in a data processing system having a data 

warehouse and an OLAP server, the method comprising: 

retrieving a pluralitv of call records from the data warehouse: 

generating a calling profile cube based on the call record s: wherein the 

calling profile cube includes information on multiple customers: 

generating a volume-based calling pattern cube for each individual 

customer based on the multi-customer calling profile cube: 
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generating a probabtlitv-based calling pattern cube based on the volume- 
based calling pattern cube for each individual customer: 

comparing the pnobabaitv-based calling pattern cube for e ach customer to 
a predetermined fraudulent probability-based calling pattern: 

when the probabillty-based catling pattern cube is in a first predetermined 
relationship with predetermined fraudulent probability-based calling pattern, 
p erforming a first action. 

wherein tho stop of wh e n th e prob abitft y bas e d c al ling patt e m cub e I s-fR-a 
firct prodetormin e d r e lationsh i p with pr e d e t e rm i n e d fraudu le nt prob a b ili ty - b ase d 
ca li ing patt e rn, performing a first action includes one of: 

flagging a particular caller with the probability-based calling pattern being 

analyzed as suspicious; 
automatically generating an alert that specifies callers with suspicious 

probability-based calling pattem; 
performing further Investigation on callers with suspicious probability- 
based calling pattern; 
cancellation of telephone services for callers with suspicious probability- 
based calling pattern; and 
performing other appropriate remedial actions. 

30. (Previously presented) The method of claim 29 wherein the probatwlity- 
based calling patterns enables one of the analysis and comparison of a first 
probability-based calling patterns that covers a first time period with a second 
probability-based calling patterns that covers a second time period. 

31. -35. (Canceled), 
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